home

macrocreator-setup.exe

Pulover's Macro Creator

Rodolfo U. Batista

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.speedyshare.com and multiple other hosts.
Publisher:
Rodolfo U. Batista

Product:
Pulover's Macro Creator

Description:
Pulover's Macro Creator Setup

Version:
4.1.2

MD5:
f21229bc5c5171d93be07266f9b05893

SHA-1:
8f921b829ce7436b952be4531bb64eaad8d9aa6f

SHA-256:
092a379817489e0b94b29f976819a10a4887b9fbdcc71522a964ecd25b155dbc

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/16/2024 2:42:56 PM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
Trojan.AutoHK
3.12.26.3

File size:
3 MB (3,124,957 bytes)

Product version:
4.1.2

Copyright:
Copyright © 2012-2014 Rodolfo U. Batista

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Turkish (Turkey)

Common path:
C:\users\{user}\downloads\macrocreator-setup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:C9VDN9xyVQqbLxCr4wPIpY+rjQrGbkZSG8++ijlv0IwRFysqq:MVh9xyVLbLxCs6IBrkQh++iJv0gsqq

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file macrocreator-setup.exe has been seen being distributed by the following 5 URLs.

http://www.speedyshare.com/tc8P3/b20e0853/.../KLIKACZ.exe

http://download.softpedia.com/dl/bc2217f54165d1dbcaaa223d0135646d/541d736c/100228684/software/.../MacroCreator-setup.exe

http://download.softpedia.com/dl/2bcf35aca644f13d9f471821823b5907/541dd8df/100228684/software/.../MacroCreator-setup.exe

http://dl.macrocreator.com/MacroCreator-setup.exe

http://download.softpedia.com/dl/9b1278356ebd5e429d0c80dae19b668c/54208913/100228684/software/.../MacroCreator-setup.exe

Scan macrocreator-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.